Sue Poremba

5 Steps for Proactive Cyber Risk Management How do you electronically communicate with your clients, customers, and business associates? Think about it for a moment. For most of us, we’ve moved well beyond phone calls and emails. We text. We Skype. We send instant messages. We post on social media. And those are just the […]

5 Steps for Proactive Cyber Risk Management Ashley Madison is back in the news. The last time we talked about the infamous website, it was about a major data breach that seemed to focus more on blackmail and ruining marriages than the usual PII concerns. Today the news is about how Ashley Madison scammed their […]

How to Protect Your Organization from Ransomware In May, the FBI sent out a warning: Don’t pay ransomware attackers. FBI Cyber Division Assistant Director James Trainor said in the formal statement: Paying a ransom doesn’t guarantee an organization that it will get its data back—we’ve seen cases where organizations never got a decryption key after […]

5 Steps for Proactive Cyber Risk Management During my trip to the Enfuse 2016 conference in May, I had a conversation with Paul Shomo, senior technical manager, Strategic Partnerships with Guidance Software. One of the things we talked about was the importance of companies taking a more data-centric approach to information security. When we think […]

Survey Finds Salaries, Bonuses and Contract Rates Up for U.S. Tech Pros Five or six years ago, I attended a small security conference where all of the other attendees were CSOs or CISOs for large corporations. As we chatted during the reception, I asked them how they ended up in cybersecurity. To a man (and […]

Turning Zero-Day into D-Day for Cybersecurity Threats I am a regular LinkedIn user. Over the years, I’ve found the connections I’ve made there to be useful, and it has been helpful to my career. It also gives me the chance to separate my personal and professional selves but still have some kind of connection with […]

Turning Zero-Day into D-Day for Cybersecurity Threats This week, Apple released a crucial security patch for its AirPort routers. As PC World noted: … the flaw is a memory corruption issue stemming from DNS (Domain Name System) data parsing that could lead to arbitrary code execution. I don’t write much about DNS security, and maybe […]

Security Risks in the Supply Chain Few areas within a business have benefited from the Internet of Things (IoT) as much as the supply chain. The advent of tracking and tracing technology through the supply chain gave products a voice for the first time, explains Michael Lucas, chairman of i3 Brands, and this technology advancement […]

Tackle Insider Threat by Creating a Culture of Security Awareness Last year, I reported on a study conducted by Intel Security that found that 43 percent of data loss was caused by insiders. Even though we know it’s there and that it’s serious, organizations still struggle with the whole idea of insider threats, at least […]

Top 5 Places Your Enterprise Data Is at Risk By now I’m sure you have heard the news that the Democratic National Committee (DNC) was hacked and files filled with dirt about Donald Trump were stolen. A Russian hacker has taken credit for the breach, and the files were leaked. There are a couple of […]

Turning Zero-Day into D-Day for Cybersecurity Threats Earlier this year, Mandiant released its seventh annual M-Trends report which, among other things, found that the time it takes to discover a security breach has decreased. As SecurityWeek reported: The median number of days that attackers were present on a victim’s network before being discovered dropped to […]

Turning Zero-Day into D-Day for Cybersecurity Threats On any given day, between 50 and 100 email messages land in my spam filter, and maybe one ended up there by accident. A few are legitimate emails, trying to sell me something based on past purchases, but most of them are phishing. I’ve always gotten a lot […]